ieee802154: 6lowpan: fix memory leak
authorAlexander Aring <alex.aring@gmail.com>
Thu, 22 Oct 2015 10:11:27 +0000 (12:11 +0200)
committerMarcel Holtmann <marcel@holtmann.org>
Thu, 22 Oct 2015 10:24:42 +0000 (12:24 +0200)
commitaeedebff6961d96e9df58799e6c3a93513d6f66b
tree1c6ec387b96e2014a53ec9fdacdbdf1dfa461766
parent88d07feb097b60fcca20ba63d2920b0f05a05fa0
ieee802154: 6lowpan: fix memory leak

Looking at current situation of memory management in 6lowpan receive
function I detected some invalid handling. After calling
lowpan_invoke_rx_handlers we will do a kfree_skb and then NET_RX_DROP on
error handling. We don't do this before, also on
skb_share_check/skb_unshare which might manipulate the reference
counters.

After running some 'grep -r "dev_add_pack" net/' to look how others
packet-layer receive callbacks works I detected that every subsystem do
a kfree_skb, then NET_RX_DROP without calling skb functions which
might manipulate the skb reference counters. This is the reason why we
should do the same here like all others subsystems. I didn't find any
documentation how the packet-layer receive callbacks handle NET_RX_DROP
return values either.

This patch will add a kfree_skb, then NET_RX_DROP handling for the
"trivial checks", in case of skb_share_check/skb_unshare the kfree_skb
call will be done inside these functions.

Signed-off-by: Alexander Aring <alex.aring@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
net/ieee802154/6lowpan/rx.c